From legacy architecture to Cloudflare One

This post details a methodology for migrating legacy applications to a Zero Trust architecture using Cloudflare One and CDW's expertise. It introduces a tiered application categorization (Tier 0-3) based on migration effort and complexity, with specific examples of how Cloudflare Access and Tunnel are used to 'wrap' legacy applications. It outlines a pre-migration audit process focusing on architectural readiness, identity providers, dependency mapping, and establishing firebreaks. The phased rollout strategy (Strategy & Infrastructure, Pilot Rollout, Production Scaling) emphasizes coexistence and a safe rollback path. The post highlights the use of Cloudflare Access policies for identity, device posture, and MFA checks, and the role of Cloudflare Tunnel in hiding applications from the public internet. It also touches on performance as a security feature with a single-pass architecture and post-quantum encryption.